CVE-2024-39294

Summary

CVE-2024-39294 is a buffer overflow vulnerability affecting the set_wzdgw4G() functionality within the adm.cgi file of Wavlink AC3000 M33A8.V5030.210505. A maliciously crafted HTTP request can exploit this issue, leading to stack-based buffer overflow. Successful exploitation grants an authenticated attacker the ability to execute arbitrary code or cause the device to crash, potentially allowing unauthorized access or denial-of-service attacks. It is highly recommended that affected users apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.